natcohen commented on issue #2626: Replication remote -> local doesn't work in 
3.0
URL: https://github.com/apache/couchdb/issues/2626#issuecomment-595299309
 
 
   So I have tried with basic auth for the remote server which is behind the 
reverse proxy and it works...
   
   When I say it exposes the password, I meant it exposes the clear password in 
the CouchDB replication document, not in the request!
   
   I have tried multiple configuration (source and/or target being behind 
nginx) but here is a simple example to reproduce the issue. Use your own 
computer with CouchDB installed (not behind a reverse proxy) as the source. On 
a remote server, install CouchDB and nginx. I use the following config to 
redirect the requests to the right port (I didn't test without ssl but I don't 
think it's different):
   
   ```conf
   server {
       listen 443 ssl http2;
       server_name db.address.com;
   
       ssl_certificate /etc/letsencrypt/live/db.address.com/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/db.address.com/privkey.pem;
       ssl_trusted_certificate /etc/letsencrypt/live/db.address.com/chain.pem;
       ssl_dhparam /etc/ssl/certs/dhparam.pem;
   
       location / {
           proxy_pass  http://127.0.0.1:5984;
       }
   
       error_page 404 /404.html;
           location = /40x.html {
       }
   
       error_page 500 502 503 504 /50x.html;
           location = /50x.html {
       }
   }
   ```
   
   Try to replicate from you local computer to the remote server with session

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to